# MA-974.092023: MyCERT Advisory - Cisco Security Advisories Published on 27 September 2023

**Date:** 29 Sep 2023  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-974.092023  
**Advisory ID:** MA-974.092023

---

**1.0 Introduction**
Recently, Cisco has released security advisories for vulnerabilities affecting multiple Cisco products.
**2.0 Impact**
A remote cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.
**3.0 Affected Products**
Multiple Cisco products.
**4.0 Recommendations**
MyCERT encourages users and administrators to review the following advisories and apply the necessary updates:
1) Cisco Catalyst SD-WAN Manager Vulnerabilities - SIR: Critical
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vman-sc-LRLfu2z>
2) Cisco IOS XE Software Web UI Command Injection Vulnerability - SIR: High
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdij-FzZAeXAy>
3) Cisco IOS XE Software Layer 2 Tunneling Protocol Denial of Service Vulnerability - SIR: High
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-l2tp-dos-eB5tuFmV>
4) Cisco IOS XE Software Application Quality of Experience and Unified Threat Defense Denial of Service Vulnerability - SIR: High
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-appqoe-utd-dos-p8O57p5y>
5) Cisco DNA Center API Insufficient Access Control Vulnerability - SIR: High
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-ins-acc-con-nHAVDRBZ>
6) Cisco IOS XE Software for ASR 1000 Series Aggregation Services Routers IPv6 Multicast Denial of Service Vulnerability - SIR: High
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mlre-H93FswRz>
7) Cisco IOS XE Software for Catalyst 3650 and Catalyst 3850 Series Switches Denial of Service Vulnerability - SIR: High
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cat3k-dos-ZZA4Gb3r>
8) Cisco IOS and IOS XE Software Command Authorization Bypass Vulnerability - SIR: High
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aaascp-Tyj4fEJm>
9) Cisco IOS and IOS XE Software Cisco Group Encrypted Transport VPN Software Out-of-Bounds Write Vulnerability - SIR: Medium
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-getvpn-rce-g8qR68sx>
10) Cisco Wireless LAN Controller AireOS Software Denial of Service Vulnerability - SIR: Medium
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cbw-dos-YSmbUqX3>
11) Cisco IOS XE Software for Wireless LAN Controllers Wireless Network Control Denial of Service Vulnerability - SIR: Medium
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-HFGMsfSD>
12) Cisco Catalyst 9100 Access Points Denial of Service Vulnerability - SIR: Medium
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-click-ap-dos-wdcXkvnQ>
13) Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability - SIR: Medium
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-dos-capwap-DDMCZS4m>
14) Cisco Catalyst SD-WAN Manager Web UI HTML Injection Vulnerability - SIR: Medium
<https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-html-3ZKh8d6x>
Generally, MyCERT advises the users of this devices to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- <https://sec.cloudapps.cisco.com/security/center/publicationListing.x>
- [Cisco Releases Security Advisories for Multiple Products | CISA](https://www.cisa.gov/news-events/alerts/2023/09/28/cisco-releases-security-advisories-multiple-products)